This Privacy Policy (“Policy”) explains how JiWorks Sdn Bhd. (“we”, “us”, “our”) collects, uses, and shares your personal data when you visit or make a purchase from www.caramelmonster.com (the “Site”). It also describes your rights under the Singapore Personal Data Protection Act (“PDPA”).

“Personal Data” refers to any information that can identify you, whether on its own or together with other information we may have or are likely to have access to. This Policy does not apply to aggregated or anonymised data that cannot identify you.

  1. PERSONAL DATA WE COLLECT
    When you browse the Site, we automatically collect information about your device, such as your browser, IP address, time zone, cookies on your device, the pages or products you view, the websites or search terms that brought you to the Site, and how you interact with the Site. We collect this information using cookies, log files, and web beacons or similar technologies.

When you make or attempt to make a purchase, we collect your name, billing and shipping address, payment information (including credit card details for VISA and MASTER, and information for BILLPLZ), email address, and phone number.

In this Policy, “Personal Data” includes both Device Information and Order Information.

We may use cookies to enhance your experience. You can block or delete cookies through your browser settings, although doing so may affect the Site’s performance.

  1. HOW WE USE YOUR PERSONAL DATA
    We use your Personal Data for the following purposes:

  • To process and fulfil your orders, including processing payments, arranging delivery, and sending order confirmations.

  • To communicate with you regarding your orders or enquiries.

  • To detect and prevent fraud or potential risks.

  • To improve and optimise the Site, including analysing browsing behaviour and evaluating marketing performance.

  • To send marketing messages or promotions if you have opted in.

  • To operate features on the Site that you choose to activate, which may involve sharing your Personal Data with third parties.

  • To comply with applicable laws.

  1. DISCLOSURE OF YOUR PERSONAL DATA
    We may disclose your Personal Data to enforce our Terms of Use, to operate our services, to third-party service providers, or when required by law.

We use third parties such as Shopcada (our e-commerce platform) and Google Analytics. These third parties may process your Personal Data according to their own privacy policies.

We may also use your Personal Data for targeted advertising. You may opt out using the following:
Facebook: www.facebook.com/settings/?tab=ads
Google: www.google.com/settings/ads/anonymous
Digital Advertising Alliance: optout.aboutads.info

We do not change our data practices in response to Do Not Track signals.

  1. PERSONAL DATA RETENTION
    We retain your Order Information unless you ask us to delete it. Personal Data is kept only for as long as needed for the original purpose, for legal or business needs, or where legitimate interests require further retention.

If you stop using the Site, we may still store, use, or disclose your Personal Data in accordance with this Policy and the PDPA. We may dispose of your Personal Data securely without prior notice.

  1. WITHDRAWING YOUR CONSENT
    You may withdraw your consent for the collection, use, or disclosure of your Personal Data by contacting us. We may need up to fourteen (14) business days to process your request. Some services may not be available after consent is withdrawn. We may continue to collect or use your Personal Data where permitted or required by law.

  2. TRANSFERS OF PERSONAL DATA OUTSIDE MALAYSIA
    We generally do not transfer Personal Data outside Malaysia. If such a transfer is required, we will seek your consent and ensure your Personal Data remains protected to PDPA standards.

  3. ACCESS AND CORRECTION OF PERSONAL DATA
    You may request access to or correction of your Personal Data by contacting us. We may require documents to verify your identity and may charge a reasonable fee for access requests. We may refuse requests as allowed under the PDPA.

  4. CHANGES TO THIS POLICY
    We may update this Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Your continued use of the Site indicates your acceptance of any updated Policy.

  5. CONTACT US
    If you have questions about this Policy, our data practices, or wish to make a complaint, please contact us at hello.hadaeofficial@gmail.com